sync-eu.exe.bid infection

[bartolomeo]

Same here. This has been happening regularly from Outlook for a couple of weeks. Running Windows 7 Professional, Malwarebytes Anit-Malware Pro and Malwarebytes Anti-Exploit Premium. No crapware found in Control Panel>Programs. Have not found much online about what sync-eu.exe.bid is. Myspybot.com says:

"It’s a URL involved in a large-scale malvertising campaign. A stealth infection residing inside a target PC forces one’s default web browser to hit the bad page over and over. The malware is cross-browser, so people will suffer the consequences regardless of whether they prefer Chrome, Firefox or IE. The full string being repeatedly resolved in the browser is sync-eu.exe.bid/bidswitch/sync?sub1=switchconcepts. The tail appended to the core address is an identifier of the current ongoing adware campaign.

"At this point, the setup of this hoax appears to be buggy or broken. The linked-to website, delivery.swid.switchads.com/adserver/info.php, is rendered as a black page with a tiny white dot in the center, or an all-white page in Internet Explorer. It’s titled info.php. At the end of the day, the whole adverse effect boils down to annoying the victim. But this doesn’t mean that a fully functional ads delivery network won’t be integrated in this scheme anytime soon. Meanwhile, the constant alerts from one’s antimalware are a nuisance for sure. Yet another noteworthy aspect is that the machine is still infected with a PUP (potentially unwanted program) that may cause additional trouble and pose a privacy concern. Entities like this tend to harvest victims’ web surfing information and some online credentials. So don’t fail to follow this article’s cleanup recommendations to ascertain that Sync-eu.exe.bid junk won’t turn into a bigger threat."

However, their fix is to download and install their removal program, which I know nothing about and will not do. 

Any information about this and advice about what is causing it and how to get rid of it would be greatly appreciated. If Malwarebytes suggests to download and install something additional, I will do that because I trust MBAM.

[AdvancedSetup]

Hello @bartolomeo and

Sorry for the delay, but we need to get some logs to see what's going on please

I would suggest following the advice from the topic here Available Assistance for Possibly Infected Computers and post back your logs as an attachment.

Thank you